EUVD-2026-25327
GHSA-2hv5-4h3g-4hjv
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable unauthenticated flood with no confidentiality or integrity impact and low, bounded, transient availability degradation confined to the vulnerable system.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
6Blast Radius
ecosystem impact- 1 npm packages depend on openclaw (1 direct, 0 indirect)
Ecosystem-wide dependent count for version 2026.3.31.
DescriptionCVE.org
OpenClaw before 2026.3.31 lacks a shared pre-auth concurrency budget on the public LINE webhook path, allowing attackers to cause transient availability loss. Remote attackers can flood the webhook endpoint with concurrent requests before signature verification to exhaust resources and degrade service availability.
AnalysisAI
Resource exhaustion in OpenClaw npm package versions up to 2026.3.28 allows remote unauthenticated attackers to degrade availability of the LINE webhook integration by flooding the endpoint with concurrent requests before signature verification occurs. The CVSS 4.0 score of 6.9 reflects network-accessible, zero-privilege exploitation with bounded low availability impact; the vendor's own triage classifies severity as low due to the transient, non-persistent nature of the disruption. No public exploit code exists and no active exploitation is confirmed - SSVC marks exploitation status as none, though the attack is rated automatable.
Technical ContextAI
OpenClaw is an npm package (CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) providing a LINE messaging platform integration via HTTP webhook. The root cause is CWE-799 (Improper Control of Interaction Frequency): the public LINE webhook route accepted concurrent HTTP POST requests and began reading request bodies before any authentication or signature verification was performed. Because Node.js processes I/O concurrently and LINE signature verification requires reading the full body, a flood of simultaneous connections could exhaust the process's available in-flight capacity before any request was authenticated or rejected. The fix, introduced in commit 57c47d8c7fbf5a2e70cc4dec2380977968903cad, adds a createWebhookInFlightLimiter mechanism sourced from openclaw/plugin-sdk/webhook-request-guards that enforces a shared cap on concurrent pre-verification body reads, returning HTTP 429 Too Many Requests to any connection exceeding WEBHOOK_IN_FLIGHT_DEFAULTS.maxInFlightPerKey.
RemediationAI
Upgrade the OpenClaw npm package to version 2026.3.31 or later, which is the vendor-released patched version confirmed by the GHSA advisory (https://github.com/openclaw/openclaw/security/advisories/GHSA-qcc3-jqwp-5vh2) and fix commit (https://github.com/openclaw/openclaw/commit/57c47d8c7fbf5a2e70cc4dec2380977968903cad). If an immediate upgrade is not possible, place a reverse proxy or API gateway rate limiter (e.g., nginx limit_conn, AWS API Gateway throttling) in front of the LINE webhook endpoint to cap concurrent connections per source IP; the trade-off is that legitimate high-burst LINE event delivery scenarios may be throttled, so tune limits conservatively. Network-level controls such as blocking anomalous traffic volumes at the perimeter can further reduce exposure but do not eliminate the root cause. No workaround fully substitutes for the patch.
Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
OpenClaw sandbox browser functionality launches x11vnc for noVNC observer sessions without requiring authentication, all
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
OpenClaw versions prior to 2026.3.1 contain a sandbox escape vulnerability that allows authenticated attackers with low
OpenClaw versions 2026.1.30 and below fail to validate Telegram webhook secret tokens when `channels.telegram.webhookSec
Same weakness CWE-799 – Improper Control of Interaction Frequency
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today